CVE-2026-89173 Kingdom Communication Associated｜Smart Video Intercom System - Sensitive Data Exposure

Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulnerability. Unauthenticated remote attackers can enumerate valid user accounts by exploiting differences in system responses...

wordpress-bf

wordpress-bf This is a tool to enumerate the authors of a wordpress blog website and try bruteforce the logins. Its not complete but it does work. If you spot any horiffic code please submit a PR to fix it! It will write the url and and user and password to a text file called found.txt It will...

smtp_userenum

smtpuserenum Help: root@kitploit: python3 smtpuserenum.py -h Usage: root@kitploit: python3 smtpuserenum.py You can change the username list:...

Talon

THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of Talon or to submit an issue, reference https://github.com/Tylous/Talon. Talon Talon is a tool designed to perform automated password guessing attacks while remaining undetected. Talon can enumerate a list of users to identify which...

-SSH-Enum-CVE-2018-15473

🛡️ OpenSSH User Enumeration Tool CVE-2018-15473 User enumeration tool for OpenSSH versions below 7.7. This version has been ported to Python 3 and optimized for maximum stability in HackTheBox and TryHackMe labs. ✨ Key improvements Compatibility: Works with paramiko 3.x fixes the property object i...

DVRFaultNET

DVRFaultNET .NET console application that exploits DVR CVE-2018-9995 vulnerability Usage Once launched, you will be prompted to enter the URL of the DVR camera. The program add ?opt=user&cmd=list to the URL and sends a request containing "Cookie:uid=admin" header then server return a JSON string...

CVE-2021-32789

💣 CVE-2021-32789 Exploit de volcado de usuarios de WooCommerce para WordPress Volcar usuario administrador root@kitploit: woo -u http://example.com Volcar todos los usuarios root@kitploit: woo -u http://example.com -dump...

CVE-2023-31445-Unprivileged-Information-Disclosure

CVE-2023-31445-Unprivileged-Information-Disclosure Repository contains description for CVE-2023-31445 discovered by Dodge Industrial Team for Dodge OPTIFY platfrom. CVE ID: CVE-2023-31445 Vendor: Cassia Networks Product: Access Controller Version: Cassia-AC-2.1.1.2203171453 Vulnerability:...

ssh_user_enum

sshenumv0.3.py Usage: sshenumv0.3.py options Options: root@kitploit: -h, --help Show this help message and exit -u --userlist Specify a new line delimited username file -i --ip Specify the target -m --multiplier Specify the multiplier for the password used to cause the delay -t --threshold Adjust...

CVE-2025-53640

CVE-2025-53640 – Authenticated User Enumeration in CERN's Indico BOLA Vulnerability PoC and technical analysis of CVE-2025-53640: a Broken Object Level Authorization BOLA vulnerability in Indico enables authenticated user enumeration via endpoint, exposing names, emails, and affiliations. Include...

usernamer

usernamer usernamer is a penetration testing tool to generate a list of possible usernames/logins for determined name ex: John Doe Doeson for user enumeration or bruteforcing. This tool also supports text-files with one name per line as input. Features usernamer has a plugin structure that enable...

CVE-2026-9161

CVE-2026-9161 is an observable response discrepancy vulnerability in the DernekPlus Website Template that enables account footprinting (user enumeration). Affected versions are through 10092026 . The CVSS 3.1 score is 5.3 (MEDIUM) with a low confidentiality impact, as an unauthenticated network a...

CVE-2026-9161 User Enumeration in DernekPlus' Website Template

Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This issue affects Website Template: through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

CVE-2025-65899

CVE-2025-65899: Kalmia CMS v0.2.0 - es vulnerable a Discrepancia de Respuesta Observable Resumen de Vulnerabilidad CVE ID: CVE-2025-65899 Producto: DifuseHQ Kalmia CMS Versión Afectada: 0.2.0 Tipo de Vulnerabilidad: Discrepancia de Respuesta Observable Privilegios Requeridos: Ninguno Impacto...

CVE-2026-44595

CVE-2026-44595 — YAMCS Unauthorized User Enumeration via IAM API Summary The IAM API endpoints listUsers, getUser, listGroups, getGroup in yamcs-core do not enforce the required SystemPrivilege.ControlAccess check. Any authenticated user — even one with no privileges — can enumerate all user...

CVE-2025-56132-Liquidfiles

CVE-2025-56132 - LiquidFiles User Enumeration POC Vulnerability Description This vulnerability was identified in LiquidFiles version 4.1 and below. When initiating a password reset via the “POST /passwordreset” endpoint, the application responds differently depending on whether the supplied email...

CVE-2026-25050

CVE-2026-25050 – Authentication Timing Attack This repository contains a Proof of Concept demonstrating a timing attack affecting the NativeAuthenticationStrategy.authenticate method. This PoC is provided as a technical demonstration for blog / research purposes. Vulnerability The authentication...

IServ Schoolserver User Enumeration

IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...

CentOS-Control-Web-Panel-CVE

CentOS Control Web Panel version 0.9.8.836 - 0.9.8.847 On June 29, 2019 our team started to find vulnerability on CentOS Control Web Panel CWP version 0.9.8.836, and we found some critical vulnerabilites. Some of the vulnerabilities we found can be chained to compromise the server from anonymous...

CVE-2026-53959

CVE-2026-53959 - 4gaBoards 3.3.9 - User Information Disclosure This repo contains a Proof of ConceptPoC exploit for CVE-2026-53959 Disclaimer This project is provided for educational purposes and authorized security testing only. Do not use it against systems that you do not own or have permissio...